Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/48f84ba8-d2ee-3b27-b8a0-e369207c2e31.roa
File:                     48f84ba8-d2ee-3b27-b8a0-e369207c2e31.roa (raw, json)
Hash identifier:          /9wbV/bDUVx+zHN0Qrf2ZtQdt9EGZj8ygU6bUp0opm4=
Subject key identifier:   59:0D:2F:0E:37:54:22:47:1E:4B:C1:F5:BD:AF:6A:53:78:8B:5F:1E
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584B0746BDC1193668ABFDF5DE00
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/48f84ba8-d2ee-3b27-b8a0-e369207c2e31.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     834
IP address blocks:        173.249.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:bd:c1:19:36:68:ab:fd:f5:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=64036126-3ae8-4c05-9e15-f92134a42b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5f:32:0c:3e:ad:77:3b:32:4c:cd:87:8f:ff:
                    bc:56:85:de:88:b4:57:f2:4e:9b:8d:a0:67:61:bc:
                    39:6c:a1:41:4b:b3:2d:01:69:9f:76:5a:8f:6d:89:
                    f6:9f:46:23:5e:91:92:2d:46:bd:00:c8:18:77:02:
                    40:2a:f0:d2:52:23:6c:f9:6a:8f:b8:e8:e5:16:28:
                    03:90:64:18:3d:6d:b4:29:ff:3b:b3:cf:0b:80:b1:
                    b5:fa:6f:30:40:42:77:27:a3:f5:85:cf:3e:8c:46:
                    6f:d8:80:4d:68:48:8f:5b:6c:fb:12:76:09:36:8e:
                    54:a4:d6:6c:1f:43:fd:8c:dd:b7:c7:f3:4c:4f:6a:
                    68:04:97:7a:34:cc:b7:d2:ce:e3:50:fe:3d:c6:8c:
                    d7:22:e2:d1:fc:23:e2:1a:52:30:eb:fb:8a:98:56:
                    9b:97:20:58:3e:c8:27:0f:e8:77:87:91:b4:6b:e2:
                    95:56:bb:96:85:c6:56:e4:2f:65:47:32:8f:16:5f:
                    cb:41:41:e4:99:9a:4d:fa:10:ff:5f:1c:80:a1:bb:
                    13:f6:e9:cd:91:01:14:ba:35:71:ac:fa:f1:f8:c4:
                    12:e5:c7:b1:f6:a9:0a:aa:5b:f8:17:7c:67:bf:f5:
                    38:32:c5:97:25:3f:00:6f:4c:89:1f:a1:f1:28:96:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0D:2F:0E:37:54:22:47:1E:4B:C1:F5:BD:AF:6A:53:78:8B:5F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/48f84ba8-d2ee-3b27-b8a0-e369207c2e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:23:a8:6f:06:ce:32:8c:15:b7:15:ec:35:df:a2:63:d0:d0:
         08:17:b7:fc:24:72:68:39:03:ac:6d:e5:29:32:09:a3:af:01:
         e2:bb:51:e7:25:2b:5a:c5:5b:ef:51:79:ca:6c:34:f9:bc:bf:
         a7:98:44:f4:e4:9e:55:93:de:97:11:dc:0d:8a:e3:a1:93:f5:
         ed:8f:d5:fb:c4:25:96:00:46:07:7d:06:f1:2e:79:9c:17:e7:
         50:45:ec:dd:12:6b:1a:d9:10:0c:ea:80:54:3a:0e:48:90:8b:
         eb:40:ac:5e:ea:66:48:54:33:20:4a:d5:35:e3:af:23:cb:12:
         47:5b:70:3e:d7:e8:37:27:16:75:bb:5b:ca:7f:54:0b:b9:15:
         68:40:82:8c:51:7a:32:a9:02:0c:aa:fd:89:02:dd:cf:c5:3b:
         c6:e8:37:90:4e:1c:66:86:b2:92:d9:db:ff:10:44:62:fe:34:
         6d:5b:70:44:ec:a5:83:4c:f1:4a:59:7c:6d:7f:c1:3c:05:13:
         87:5d:c7:7e:fa:fa:6d:09:8a:eb:2f:62:b5:79:21:d3:8b:33:
         54:21:90:3a:19:0f:df:f4:ee:16:b0:5b:2e:56:6e:33:37:a8:
         66:f5:50:3b:d2:ba:0e:3e:86:59:99:1d:27:8d:60:3e:0a:1c:
         c9:ee:e8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:16:53 2025 by rpki-client